MS Graph - team create API returns 403 Forbidden error without proper error message

Question

I have a single-tenant Azure app and I have all the required permission for creating an MS team via the app, and The API was working fine with the multi-tenant App earlier, but the same code is not working for the single-tenant app registered user; Please let me know if I am missing anything here; I am using organization tenant uri in my authn and authz calls for the single tenant.

Error Response

API Permissions:

Decoded user's token

Answer 1

@Wolken Software Ltd - When issuing a request with application permissions, a user must be specified in the members collection.

POST https://graph.microsoft.com/v1.0/teams
Content-Type: application/json

{
   "******@odata.bind":"https://graph.microsoft.com/v1.0/teamsTemplates('standard')",
   "displayName":"My Sample Team",
   "description":"My Sample Team’s Description",
   "members":[
      {
         "@odata.type":"#microsoft.graph.aadUserConversationMember",
         "roles":[
            "owner"
         ],
         "******@odata.bind":"https://graph.microsoft.com/v1.0/users('0040b377-61d8-43db-94f5-81374122dc7e')"
      }
   ]
}

If you are using the unattended client credentials flow to obtain an access token, then you must specify the user in the member collection.

Answer 2

Hi @Wolken Software Ltd

Make sure the target user has an O365 license, which is required to create a team.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.